AI Sovereignty Is Really a Workload Risk Decision

September 22, 2026 · Keith Pasley

Microsoft’s latest Azure expansion in India caught my attention for one reason.

They described sovereignty as a “workload-based risk decision.”

That’s a useful way to think about it.

We tend to turn sovereign AI into a cloud versus on-premises conversation. I don’t think that’s where the decision should start.

Start with the workload.

What data does it use?

Where can that data live?

Who can access it?

Who controls the encryption keys?

Which models can it use?

What happens if it needs to operate disconnected from the public cloud?

The answers won’t be the same for every workload.

A customer-facing AI assistant might be fine in a public cloud.

A system working with regulated financial data may need local data residency and tighter controls.

A highly sensitive government or intellectual-property workload may need private or disconnected infrastructure.

That’s why I think enterprise AI will increasingly be hybrid by design.

Different models.

Different infrastructure.

Different levels of control.

All based on what the workload actually requires.

So instead of starting with:

Where should we run our AI?

I’d ask:

What does this workload require us to control?

Then decide where it belongs.

Technology doesn’t create business value. Better decisions do.

Back to Insights

Independent publication. Content reflects the author’s personal views, not any employer’s views or endorsement. Educational only; not legal, security, financial, or professional advice. Do not submit confidential information to public tools.